Our scoring model, published in full
How We Rate Casinos [September 2026]: How to Choose an Online Casino, and Our Review Methodology
Every score on this site comes from the same weighted model, applied to evidence we collected ourselves. This page sets out the weights, what each component measures, how the evidence is gathered, and what would make us change a score. If a ranking on this site ever looks odd, this page is where you check our working.
By Jordan Whitcombe, Editor-in-Chief·
Fact-checked by Aroha Tainui·Updated 21 September 2026·Next review 20 October 2026Most gambling comparison sites publish a ranking and ask you to trust it. We would rather publish the model. Below is our full online casino review methodology: the exact weights, the evidence behind each component, the things we refuse to do, and how we are paid. If you only want the practical version — how to choose an online casino NZ side without relying on us at all — start with the six checks immediately below.
The weighting
Five components, weighted as below. The overall score is the weighted mean, rounded to one decimal place. Component marks appear at the top of every review so you can re-weight them for your own priorities.
| Component | Weight | What it measures | Primary evidence |
|---|---|---|---|
| Payout speed | 25% | Time from confirming a withdrawal to funds being available, plus weekly caps and how often requests are held | Our timed withdrawal log |
| Bonus value | 20% | Turnover required relative to bonus granted, game weighting, maximum bet and expiry — not headline size | Full reading of the bonus terms |
| Game library | 20% | Studio coverage against a fixed nine-studio list, verified RTP configuration, live table count, filtering quality | Manual audit from an NZ IP |
| Banking & NZD | 15% | NZD wallet and NZD bank transfer, rail breadth, minimum deposit, FX spread on non-NZD sites | Cashier testing with real deposits |
| Trust & disclosure | 20% | Licence verifiability, named operating company, independent game testing, complaints path, responsible gambling tools, trading history | Regulator registers and the operator’s own footer |
What each component measures
Payout speed — 25%
Measured, not claimed. We request withdrawals on real balances and record the time from clicking confirm to funds being available — not to the operator marking the request approved, which is the number operators quote. A site scores well by being fast and consistent: a 40-minute best result alongside a four-day worst result scores below a steady three hours. Weekly caps are folded in, because a cap below the maximum bonus is a delay mechanism.
Bonus value — 20%
Scored on the turnover contract, never on the headline. We compute the turnover required on a standard NZ$100 deposit, apply the game weighting to the games a typical player would use, and check the maximum bet and the expiry. A 600% package at 40x scores below a 100% package at 10x, which is why Smash outscores CrownSlots on this component despite a smaller effective match.
Game library — 20%
Counted, not quoted. Studio coverage is checked against a fixed list of nine studios. RTP configuration is sampled across ten popular titles by opening each game’s paytable — a casino running reduced builds loses marks here regardless of lobby size. Live tables are counted manually at 9am NZST, which is when thin floors show up.
Banking and NZD — 15%
A true New Zealand dollar wallet with NZD bank transfer scores highest, because a euro-denominated site costs a Kiwi roughly 2–3% on each conversion. We measure the actual amount credited against the amount sent to calculate the real spread rather than taking the cashier’s stated rate.
Trust and disclosure — 20%
The component that separates otherwise similar sites. Full marks require a licence number published on the site that verifies on the regulator’s register, a named operating company, stated independent game testing, a reachable complaints path, and responsible gambling tools usable within three clicks. Trading history matters: an operator under two years old cannot reach the top of this component regardless of everything else.
How to choose an online casino, and tell if an online casino is legit
Most readers arrive at this page for one of two reasons: to audit our working, or because they want to know how to choose an online casino NZ players can rely on without taking anybody’s word for it. This section is for the second group. It is the short version of the model below, and you can run all six checks in about five minutes.
Find the licence number, not the badge
Scroll to the footer. A logo is worth nothing; a number is worth checking. This is how to check if a casino is licensed in NZ terms — there is no New Zealand register yet, so you verify against the regulator that issued it: the Curaçao Gaming Control Board, Anjouan or Tobique. If there is no number at all, stop here.
Find the company behind the licence
A named entity — Rabidi N.V., Dama N.V., Vertikal N.V., TechOptions Group — means there is a counterparty. ‘Not published’ means you have nobody to escalate to beyond the regulator, which is most of how to tell if an online casino is legit.
Check who tests the games
eCOGRA, iTech Labs or GLI should be named somewhere. That certification covers the random number generator and the stated return to player, and it is what makes the games themselves trustworthy independent of the operator.
Read the withdrawal terms before the bonus terms
Weekly cap, stated processing window, and whether identity verification happens at registration or at first cashout. What makes an online casino safe in practice is mostly whether it pays, and these three numbers predict that better than anything else on the site.
Open the responsible gambling tools
Deposit limit, cooling-off, self-exclusion — reachable from account settings within three clicks, and working. An operator that hides them, or requires an email to support to activate them, has told you something.
Deposit NZ$50 and withdraw NZ$30 in week one
The only test that settles it. Time it. What makes an online casino safe for you specifically is that it gave your money back when you asked, on the schedule it promised.
Casino licensing explained
Casino licensing explained in one paragraph: a licence is a jurisdiction agreeing to supervise an operator in exchange for fees and compliance, and its value to you is entirely a function of how seriously that jurisdiction takes the job. The Malta Gaming Authority and the UK Gambling Commission sit at the strict end, with segregated player funds and mandatory dispute resolution. The Curaçao Gaming Control Board, which replaced the old master-licence system in 2024, is a genuine improvement on what came before and a step below those two. Anjouan and Tobique are lighter still. None of them protects your balance if the operator fails.
New Zealand will have its own register from 2027 under the Online Casino Gambling Act 2026, at which point how to check if a casino is licensed in NZ becomes a single lookup rather than a judgement call. We track that here.
How the evidence is gathered
Register from a New Zealand IP address
Auckland or Christchurch, on a residential connection. Not a VPN, and not an office in another country — geo-behaviour is part of what we are testing.
Complete identity verification and time it
Real documents, real turnaround. The median across the current cohort is 14 hours and the worst was four days.
Deposit on at least two rails
One fiat and one fast rail, recording the exact amount credited so the foreign-exchange spread can be calculated on non-NZD sites.
Play a fixed two-hour session
Across pokies, a live table and, where offered, a crash game. Ten titles are opened specifically to read their RTP configuration from the paytable.
Read every bonus term in full
Multiple, what it applies to, game weighting, maximum bet, excluded titles, expiry, maximum cash-out. This takes longer than the session does.
Withdraw, and start a stopwatch
Recorded to the minute. Repeated monthly thereafter, which is how the medians accumulate.
Test support three times at different hours
Including one attempt between 2am and 4am NZST. Each asks something the terms page answers ambiguously, so we are testing accuracy as well as speed.
Verify the paperwork independently
Licence number against the regulator’s register, corporate entity against public records, game testing certificates, responsible gambling tools opened and actually used.
The withdrawal timing programme
Every payout figure on this site comes from one log. It records the operator, the rail, the amount, the timestamp at confirmation, the timestamp at funds availability, whether the request was held for review and what was asked for. It currently holds 241 withdrawals across 46 operators, and it is the reason we publish sample sizes beside every median. A median with no n is marketing.
What disqualifies an operator entirely
Some findings end the assessment rather than reducing a score. An operator that hits any of these is not listed at any position.
- A withdrawal not paid within seven days with no explanation given. This is the line. Eleven of the operators we tested failed here.
- Bonus terms that differ between the promotion page and the account terms. Four failed here.
- No contactable support across three attempts at different hours. Four failed.
- Accepting a New Zealand registration and then blocking deposits or game launch from an NZ IP. Three failed.
- Any request that we alter a factual finding in exchange for commercial terms. No operator has been delisted for this, but two have asked and it is recorded in their reviews.
How we are paid, and what it does not buy
outofthewoods.co.nz is free to read and carries no display advertising. We are paid a revenue share by operators when a reader opens an account through one of our links. That is the entire business model and it is disclosed at the top of every page that contains such a link.
The conflict is real and we are not going to pretend otherwise. Here is how it is managed, and how you can check that it is.
| Control | How it works | How you can verify it |
|---|---|---|
| Scores precede commercial terms | Operators are scored before rates are discussed, and a rate change does not trigger a re-score | Compare our published rates against our rankings — they do not correlate |
| Published weights | The model on this page is applied identically to every operator | Component scores are on every review; recompute the weighted mean yourself |
| Negative listings retained | We list operators we would not use, with reasons | Roby Casino, ranked 16th with a 6.8 trust score and an explicit warning |
| No pre-publication review | Operators do not see reviews before readers | Requests to the contrary are logged in the review concerned |
| Commission disclosed | Revenue share rates are a matter we will state on request | Email [email protected] and ask about any operator |
The clearest test available: our top-ranked casino, Spinjo, pays us 45%. CrownSlots pays 50% and ranks fourth. Spino pays 25% and Ivibet pays 20%, and both are listed. If commission set the order, the page would look completely different.
Corrections and complaints
We get things wrong. When we do, we want to know quickly.
- Factual error on a page: email [email protected] with the URL and what is wrong. We aim to respond within two working days and to correct within five. Material corrections are noted on the page.
- Complaint about an operator: email [email protected]. We cannot adjudicate a dispute — we are a publisher, not a regulator — but we log every complaint against the operator’s trust score, we will tell you which regulator to escalate to, and a pattern of complaints affects the ranking.
- Complaint about us: same address. If you believe a page is misleading, say so and we will review it against this methodology.
Editorial standards
The standing rules this masthead operates under:
- If we have not tested it, we do not claim it. Where a figure comes from an operator rather than from us, the page says so.
- Every number carries its sample size or its source.
- Every content page names a writer and a separate fact-checker, both with public profiles.
- Legal content is written from primary legislation and regulator guidance, never from another publisher’s summary.
- Negatives appear in the listing, not buried in the review.
- No page on this site will ever describe gambling as a way to make money, solve a financial problem or generate income.
- Responsible gambling information appears on every page, not only on the responsible gambling NZ page dedicated to it. The Gambling Helpline NZ number sits in the strip at the top of every page and in every footer.
Questions about our methodology
Do operators pay for a better ranking?
No, and the data shows it. Our highest commission partner, CrownSlots at 50%, ranks fourth. Our lowest, Ivibet and Slotsgem at 20%, are not excluded — they are ranked where their scores put them. Kingdom pays us 45% and outranks CrownSlots at 50%. If commission drove the order, none of that would be true.
Do you let operators see reviews before publication?
No. Operators see a review when readers do. We will correct a factual error at any time and we log the correction, but we do not send drafts for approval and we do not accept edits to opinion. Two operators have asked; both requests are recorded in the relevant reviews.
How often is the data refreshed?
Monthly, on a fixed cycle. Payout medians are re-measured, licence numbers and corporate entities are re-verified, bonus terms are re-read in full, and live table counts are re-counted from a New Zealand IP. Pages carry a ‘next review’ date so you can see when the current figures expire.
How can I tell if an online casino is legit myself?
Knowing how to tell if an online casino is legit comes down to six checks, all at the top of this page. In order of how much they tell you: a licence number that verifies on the regulator’s register, a named operating company, independent game testing by eCOGRA, iTech Labs or GLI, a weekly withdrawal cap above the maximum bonus, working responsible gambling tools, and a NZ$50 test deposit followed by a NZ$30 withdrawal in week one. The last one settles it.
What makes you qualified to review casinos?
Five named editors with declared beats and checkable backgrounds, listed on our authors page. Between them: thirteen years in online gambling including six in operator payments, an LLB and a practice of reading primary legislation, ten years in payments analytics, seven years auditing game libraries, and eleven years in sports trading. Every page names the writer and a separate fact-checker.
Why do you list casinos you would not use?
Because a list that contains only recommendations is an advertisement. Roby Casino is on this site with a 6.8 trust score and an explicit warning that it publishes no licence number. Readers deserve to know it exists, that it has a large bonus, and exactly why we rank it sixteenth.
Can I see the raw data?
The measured medians, sample sizes, RTP configuration samples and market depth audits are published in the relevant pages rather than held back. If you want the detail behind a specific figure, email [email protected] and we will send it.